
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
File: tWQnMiZdQL91ypSp7IEZIRwbmzI.mft (raw, json)
Hash identifier: IwdEVYHIT30Y/cWU7ULtfyYAoFXzshUMQepMAgiUdUo=
Subject key identifier: BB:73:C9:0C:AF:86:A2:38:BD:C7:C2:22:4B:2C:65:4D:B2:66:CB:B8
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2D46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
Manifest number: 2C8F
Signing time: Mon 12 Oct 2026 15:32:44 +0000
Manifest this update: Mon 12 Oct 2026 15:32:44 +0000
Manifest next update: Mon 19 Oct 2026 15:32:44 +0000
Files and hashes: 1: tWQnMiZdQL91ypSp7IEZIRwbmzI.crl (hash: JVZUtBe87+7e7vH4ZdSkLJ2GjFUIEZXt69MFpjt+sPU=)
2: 8F199E5086EE11F19E006003A7EE528E.roa (hash: ZuAnAgHg5vFTNcsKh5KM85ZI9A4NW/8yy8AIKsgNOsk=)
3: 37BAE214429111F18FB6D217B2833773.roa (hash: 8DTZONsJGjymgnSZfnxpolvPLsYSk+tNdQgH6HrBSGI=)
4: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (hash: A0kKCJ9LwtDmC1YEa/g9xgt0EE37Ohto39y+EtO3rt0=)
5: 13461F60ABDC11EDAE837666C4F9AE02.roa (hash: ERyde/Gka5P6zXPyNt2BzYHHMs7m9I9h8bcGjPetJdo=)
6: E0CC928CABDE11ED954F5C84C4F9AE02.roa (hash: T2ATFndqif2rigzuI4qov++r1+kCWVIg5fV7GxHkRzQ=)
7: zdpO0gyaOty9ncRPEfhtGvEBspY.asa (hash: irL2kj+5b38uZFTIC6OWAZtHNzaWLv9bPTPvqTlgBWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11590 (0x2d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Oct 12 15:32:44 2026 GMT
Not After : Oct 19 15:32:44 2026 GMT
Subject: CN=6accfd9c-6a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:50:62:25:0f:16:15:8d:fc:eb:83:d3:37:
61:68:9b:38:54:20:5a:65:56:3e:e7:92:35:95:38:
d9:d1:8b:2a:4c:3d:db:31:38:f7:50:74:8f:a9:29:
3c:26:aa:05:cf:8e:b3:a0:bc:da:69:f9:6a:ba:f7:
18:79:d8:e2:68:91:e1:92:22:7e:82:8e:28:f0:53:
6b:40:a0:ca:14:b2:b7:30:f5:74:5a:44:ea:ef:d7:
29:c3:2c:e8:ef:cc:bf:83:f1:0f:39:a2:fc:a8:8b:
c2:60:40:da:40:dd:4f:f4:ff:45:d7:d9:f2:78:f3:
2d:7d:02:aa:f8:2e:dc:c1:8b:3e:75:62:ac:1b:04:
88:27:11:b9:0a:c6:27:d1:64:25:ab:c0:2b:04:d4:
3e:23:68:b8:0f:11:01:d0:aa:7f:09:64:00:35:8c:
e8:5d:d2:25:c6:38:06:f5:4f:a8:f8:b3:c3:d5:02:
b2:99:af:41:97:89:b1:d7:a4:e1:62:84:11:d4:6a:
9e:10:8b:8c:8d:d4:0d:55:08:86:d1:a5:57:cc:f7:
e3:16:45:5d:f4:1d:d4:88:65:b2:6d:b1:7c:77:2c:
78:cd:86:4f:64:5f:a4:8d:47:f2:5d:92:d1:89:19:
7a:18:c3:cb:55:cb:fa:34:43:44:b8:49:38:5e:80:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:C9:0C:AF:86:A2:38:BD:C7:C2:22:4B:2C:65:4D:B2:66:CB:B8
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:e2:9a:6e:b7:46:ab:f2:2e:d5:19:c8:0f:20:3a:2e:4f:
5c:24:44:98:24:79:73:11:15:ac:f7:91:92:48:91:1b:a2:7d:
e8:bc:20:e0:90:d2:ab:47:7e:7b:6a:e6:47:81:51:e4:c7:0d:
67:60:08:70:2c:f7:eb:af:ae:05:84:39:f6:d2:87:0e:6e:69:
87:1a:cb:bf:e0:53:0a:f7:d8:c6:54:52:27:2e:30:d1:be:bb:
df:27:2d:6d:4b:c1:41:d7:de:56:a6:b7:25:6a:6e:8f:0d:2d:
e8:f3:32:53:68:03:d6:84:28:b7:c4:e2:ca:97:48:54:56:ab:
13:68:53:08:4f:fb:2c:a7:92:16:35:43:52:34:ed:be:94:0b:
cc:98:c1:38:88:84:ae:66:b9:06:c3:cd:ec:1f:fe:72:75:18:
de:26:ef:17:fa:ac:fe:38:61:9a:d2:86:40:e2:64:6f:6b:4d:
85:72:4f:e1:18:30:c9:4f:ee:82:21:8f:88:e1:74:33:b0:64:
63:b5:d0:cc:fa:1d:53:f7:c6:50:ef:95:fc:e4:43:2b:a8:ab:
25:c8:2e:7c:1d:1b:1f:c8:83:52:5b:72:1a:8a:5c:f8:66:26:
67:fa:dc:ec:26:2c:80:aa:bc:87:90:34:ab:03:39:73:9f:a9:
4e:03:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:54:32 2026 by rpki-client